This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.cer (raw, json) Hash identifier: QMljqIs45X0V3bWPxoOTY6WoLUtgWjEHX/JgfYrDjRA= Subject key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3917FB380D26AFFB5F57E5782DA2A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57100 IP: 91.228.12.0/22 IP: 94.154.32.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:17:fb:38:0d:26:af:fb:5f:57:e5:78:2d:a2:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:b6:f4:62:65:e1:5b:8b:27:a5:a9:19:7f: fb:1b:93:f5:61:6a:e2:76:b0:f5:ba:83:e0:09:d8: ca:b6:96:9c:d6:74:ac:5e:1b:ec:56:93:49:73:82: 2a:ef:5f:cf:50:ab:f9:01:6a:9b:30:63:39:0d:65: ce:c3:84:e2:6a:23:c4:77:6b:85:20:b6:45:b3:d1: aa:15:d1:96:cd:55:ce:fa:48:77:dd:a7:62:06:99: 89:9e:ee:b9:df:a2:33:42:62:0a:72:d8:20:72:8a: 16:3f:d9:3f:35:08:db:b0:33:ee:2d:c7:d5:c8:b4: ec:5d:62:69:ed:d6:1e:60:9d:8a:e8:c6:37:fd:b5: 28:14:e4:5c:10:1a:c0:dc:8b:c5:0d:b0:01:d3:81: 12:94:69:af:d6:da:27:76:e3:6a:15:c3:3e:61:6b: 7e:f4:20:c4:f1:48:35:53:60:5d:c9:2f:43:f3:b8: a9:68:c0:13:5c:de:04:38:3d:8b:75:65:86:f3:21: 2c:84:df:b9:4b:5d:7e:1f:83:bb:c0:e9:33:d6:00: 17:12:f9:e3:2a:35:02:63:af:25:07:f0:b1:be:0a: c6:78:39:78:fe:90:da:9e:3c:70:6e:f3:4e:3e:b3: e6:d7:5d:1f:0b:c8:c7:b9:3e:01:b4:e7:41:b9:1e: 13:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.12.0/22 94.154.32.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57100 Signature Algorithm: sha256WithRSAEncryption 57:20:27:e8:7e:ad:ac:15:8d:34:b4:5b:ce:97:a3:74:85:1b: 07:d8:13:0f:30:ef:eb:0f:91:2a:8e:0f:7f:a0:58:6c:03:f0: df:3f:5f:66:09:60:e5:74:12:58:c2:80:27:8b:c5:23:3e:36: 99:d8:73:0f:f9:a5:6f:90:a9:16:e9:ac:54:d1:01:bc:51:4b: 79:6b:e4:38:ba:5f:ac:bd:1b:ff:81:e8:b6:cb:1a:ba:32:d8: ad:b1:c7:5b:86:d2:86:dd:ef:b7:c0:89:16:f5:b2:61:44:e6: 03:a3:06:0d:7c:27:e6:00:7b:a1:3c:f8:e3:e8:ef:98:3f:d8: 84:4d:c7:6a:28:d3:17:8e:23:64:6c:f3:06:e8:0d:59:4b:fd: bc:9c:19:0c:8c:a9:07:98:47:ca:d6:5b:c0:00:03:2e:3d:96: d2:fb:d7:81:8e:bb:ae:fe:77:77:f0:ef:90:be:a5:77:ed:0f: 58:b3:e5:6e:12:c8:59:86:f4:42:0a:b4:21:73:bb:9e:dd:92: e1:57:6d:79:ce:af:45:0f:dd:ab:98:b4:2b:1c:78:d4:b6:d3: f2:e5:66:d5:72:e6:81:1e:ff:91:62:a6:ba:03:4b:3a:88:a7: 39:40:e9:d8:79:1c:87:90:ea:b2:3a:f4:33:79:9e:7a:f4:e5: 73:a7:ca:85 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+ORf7OA0mr/tfV+V4LaKkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2NmMzg4NGI3ODAwN2EyNWRiZTJlMmNlZjBjYzczYjY5OTIxZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEG29GJl4VuLJ6WpGX/7G5P1YWri drD1uoPgCdjKtpac1nSsXhvsVpNJc4Iq71/PUKv5AWqbMGM5DWXOw4TiaiPEd2uF ILZFs9GqFdGWzVXO+kh33adiBpmJnu6536IzQmIKctggcooWP9k/NQjbsDPuLcfV yLTsXWJp7dYeYJ2K6MY3/bUoFORcEBrA3IvFDbAB04ESlGmv1tonduNqFcM+YWt+ 9CDE8Ug1U2BdyS9D87ipaMATXN4EOD2LdWWG8yEshN+5S11+H4O7wOkz1gAXEvnj KjUCY68lB/CxvgrGeDl4/pDanjxwbvNOPrPm110fC8jHuT4BtOdBuR4TiQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFOfPOIS3gAeiXb4uLO8Mxztpkh+IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzRlN2Jj Ny0yNjBlLTQ3ZTYtODM4OC1hMTg0ZjM1NTZlNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvNGU3YmM3 LTI2MGUtNDdlNi04Mzg4LWExODRmMzU1NmU0My8xLzU4ODRoTGVBQjZKZHZpNHM3 d3pITzJtU0g0Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW+QMAwQDXpogMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDfDDANBgkqhkiG9w0BAQsFAAOCAQEAVyAn6H6trBWNNLRbzpejdIUb B9gTDzDv6w+RKo4Pf6BYbAPw3z9fZglg5XQSWMKAJ4vFIz42mdhzD/mlb5CpFums VNEBvFFLeWvkOLpfrL0b/4HotssaujLYrbHHW4bSht3vt8CJFvWyYUTmA6MGDXwn 5gB7oTz44+jvmD/YhE3HaijTF44jZGzzBugNWUv9vJwZDIypB5hHytZbwAADLj2W 0vvXgY67rv53d/DvkL6ld+0PWLPlbhLIWYb0Qgq0IXO7nt2S4Vdtec6vRQ/dq5i0 Kxx41LbT8uVm1XLmgR7/kWKmugNLOoinOUDp2Hkch5Dqsjr0M3meevTlc6fKhQ== -----END CERTIFICATE-----Generated at Mon Jan 19 18:29:14 2026 by rpki-client